From: Joachim Schipper (j.schipper@math.uu.nl)
Date: Wed Dec 28 2005 - 13:14:28 EST
On Wed, Dec 28, 2005 at 01:07:49PM -0000, aqua.le0@gmail.com wrote:
> Hi all
>
> While performing a TCP traceroute using cain&able i got different ttl values for the same ip, can anyone explain about this
>
>
> 10.10.10.10;401 ms (TTL=230) - TTL exceeded;411 ms (TTL=230) - TTL exceeded;500 ms (TTL=230) - TTL exceeded;(Unknown)
>
> 10.10.10.10;400 ms (TTL=106) - Echo Reply;401 ms (TTL=102) - Echo Reply;400 ms (TTL=102) - Echo Reply;(Unknown);
At a guess, 10.10.10.10 is doing NAT to something that is deeper in the
network? Hard to tell without knowing what you sent, though.
Alternatively, an admin thought it nice to fsck with hackers' minds by
adding some randomness to the firewall.
Joachim
------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner:
Hackers are concentrating their efforts on attacking applications on your
website. Up to 75% of cyber attacks are launched on shopping carts, forms,
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
futile against web application hacking. Check your website for vulnerabilities
to SQL injection, Cross site scripting and other web attacks before hackers do!
Download Trial at:
http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:55:18 EDT